MacLochlainns Weblog

Michael McLaughlin's Technical Blog

Site Admin

Watch the Event Logs

with 4 comments

It’s the end of our Spring term, and yes occasionally somebody can’t sign on to their Oracle instance because their event log is full. They get the following message on Winodws:

C:\>sqlplus / AS sysdba
 
SQL*Plus: Release 11.1.0.7.0 - Production ON Wed Jul 15 10:19:37 2009
 
Copyright (c) 1982, 2008, Oracle.  ALL rights reserved.
 
Enter password:
ERROR:
ORA-28056: Writing audit records TO Windows Event Log failed

The fix is simple, just delete your items from your Windows’ event log. ;-)

Written by maclochlainn

July 15th, 2009 at 4:46 pm

4 Responses to 'Watch the Event Logs'

Subscribe to comments with RSS or TrackBack to 'Watch the Event Logs'.

  1. Better stop the event log.. its helps yuo to prevent this error again … :)

    abeul hameed

    26 Aug 10 at 12:37 am

  2. That’s true in some development instances, but ill advised because it could suppress ORA-00600 errors that require your attention to prevent a loss of the instance. At least, that’s why I suggest monitoring it … ;-)

    maclochlainn

    26 Aug 10 at 7:43 am

  3. In my case, it was becuase I had disabled Event logs in services.msc :D

    zax

    18 Oct 10 at 8:25 pm

  4. Paulo

    29 Nov 11 at 11:34 am

Leave a Reply